Beeper

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may read and summarize private Beeper conversations, including messages from connected services.

Why it was flagged

The skill intentionally retrieves local chat content into the agent context; this is purpose-aligned but can expose private conversations and any untrusted text contained in messages.

Skill content
This skill provides **read-only access** to your local Beeper chat history. Browse threads, search messages, and extract conversation data.
Recommendation

Install only if you are comfortable letting the agent search your local Beeper history; use specific queries and avoid sharing retrieved chat output unless you have reviewed it.

What this means

The installed CLI behavior depends on the current upstream repository version at install time.

Why it was flagged

The install instruction fetches the latest version of an external Go CLI rather than a pinned version included in the artifact set.

Skill content
go install github.com/krausefx/beeper-cli/cmd/beeper-cli@latest
Recommendation

Review the upstream repository and consider pinning a trusted version before installation.